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We propose a scheme of quantum secret sharing between Ahces' group and Bobs' group with 
single photons and unitary transformations. In the protocol, one member in Alices' group prepares 
a sequence of single photons in one of four different states, while other members directly encode 
their information on the sequence of single photons via unitary operations, after that the last 
member sends the sequence of single photons to Bobs' group. Then Bobs except for the last one 
do work similarly. Finally last member in Bobs' group measures the qubits. If Alices and Bobs 
guarnnted the security of quantum channel by some tests, then the qubit states sent by last member 
of Alices' group can be used as key bits for secret sharing. It is shown that this scheme is safe. 
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Quantum cryptography or quantum key distribution is 
a remarkable apphcation of quantum information. It has 
attracted widespread attention since the seminal work on 
quantum key distribution by Bennett and Brassard [l| 
and Ekert 2j . So far there are many quantum key distri- 
bution theoretical protocols 0, H, [1, |j, lSi, ^ H, [l^, 
[m, [H, m, [ii, [H, [11, [13, [13 . Some of them were demon- 
strated in the laboratory and will be used in the future 
secret communications. With quantum mechanics, other 
cryptographic tasks can be realized, such as q uantum se- 
cure direct communicatipn_ fig", '2^, ^ [13, [H! [3, [H, [Ifil, 




3^. 33|, [34. 35, 36] and quantum secret 

l[iltii,[ii,[ii,[i3, 




38, 39, 40, 41U4^ 
M, MTHT 

Assume that there are a manager Alice, and her agents 
Bob and Charlie, who are at remote places. One of the 
agents. Bob or Charlie, is not entirely trusted by Alice, 
and unfortunately she does not know who is the honest 
one. However Alice knows that if Bob and Charlie co- 
operate, the honest one will keep the dishonest one from 
doing anything wrong. By means of the secret sharing 
Alice can instruct Bob and Charlie to complete a task 
safely. The idea of secret sharing is that a secret of Alice, 
is shared between her agents, Bob and Charlie, in such a 
way that it can only be reconstructed if both collaborate. 
However, as a matter of fact, there is not any classical 
mean to establish a secret sharing between Alice and two 
distant agents Bob and Charlie. Amazingly, the principle 
of quantum mechanics has now provided the foundation 
stone to QSS referring to the implementation of the se- 
cret sharing task. The first QSS protocol of quantum se- 
cret sharing [s^l was put forward by Hillery, Buzek and 
Berthiaume using entangled three-photon Greenberger- 
Horne-Zeilinger (GHZ) states. Xiao et al fsS^ reformu- 
lated the protocol (37j into arbitrary number party case. 
Karlsson et al [1^ realized secret sharing as in Ref. [s^l 
with two-particle quantum entanglement. They also dis- 



cussed how to detect eavesdropping, or how to detect a 
dishonest party in the protocols. Furthermore, the con- 
cept of quantum sharing of classical secrets has also been 
generalized to the sharing of secret quantum information, 
which is often called quantum state sharing [il, [49'| . In 
a more general case, notably for secure key management, 
a t-out-of-n protocol (or (i, n)-threshold scheme) with 
I < t < n spreads a secret to n participants in a way 
that any t participants can reconstruct it [59]. Recently, 
Lance et al reported an experimental demonstration of a 
(2,3) threshold QSS protocol 

Most of the existin g Q SS p rotocols use entangled states 
P [H, [H, [13, [U, mM m\MM\M- However it is be- 
lieved that implementing such multiparty secret sharing 
tasks is not always so easy, as the efficiency of preparing 
entangled states is very low jH, [5§|, at the same time 
the efficiency of the existing QSS protocols using quan- 
tum entanglement can only approach 50%. Recently, a 
scheme for quantum secret sharing without entanglement 
has been proposed by Guo and Guo [111 . They presented 
an idea to directly encode the qubit of quantum key dis- 
tribution and accomplish one splitting a message into 
many parts to achieve one-to-multiparty secret sharing 
only by product states. The theoretical efficiency is dou- 
bled to approach 100%. Deng et al also presented a one- 
to- multiparty secret sharing by using single photons [53| . 
Zhang et al proposed an QSS protocol by using single 
photons and unitary transformations (s^ . [ssl . [56j . 

Signatures on documents, authentications, encryp- 
tions, and decryptions are often needed by more than 
one person, especially by all persons of two groups in a 
trade. Therefore, it is needed to share a secret between 
many parties and many parties. That is, it is required the 
secret message shared by two groups, in such a way that 
neither any subset of each group nor the union of a subset 
of group 1 and a subset of group 2 can extract the secret 
message, but the entire group 1 or group 2 can. More 
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recently, we proposed a quantum secret sharing scheme 
employing two conjugate bases, i.e. four states, of single 
qubits to achieve the secret sharing between multip arty 
and multiparty with a sequence of single photons [57|. 
The weakness of our protocol was pointed out by Deng 
et al [g^I and Li et al [lH , they also gave a little modifica- 
tion to avoid the flaw. We have avoided the flaw pointed 
out in Ref. [6l| with a little improvement of our proto- 
col [i^l. Another QSS protocol between multiparty and 
multiparty using three rather than two conjugate bases 
was suggested by us (63j . 

In present Letter, we will combine the protocol of 
Zhang's in Ref. [SJI and ours [13, 113 to figure out a 
scheme of quantum secret sharing between multiparty 
and multiparty with single photons and unitary trans- 
formations. The security of this protocol is discussed. 

Let us suppose that group 1 and group 2 are located 
in different places, and there are members Alice 1, Alice 
2, • • • , Alice TO, and Bob 1, Bob 2, • • • , Bob n in group 
1, and group 2 respectively. Here to > 2 and n > 2. 
Group 1 and group 2 want quantum secret sharing such 
that neither part of each group nor the combination of 
a part of group 1 and a part of group 2 knows the key, 
but only all members of each group can collaborate to 
determine what the string (key) is. A protocol employing 
two conjugate bases going as follows will meet the goal 
of quantum secret sharing. 

Ml. Alice 1 generates two random classical bit strings 
Al = {a\,al, • • • , ajf} and Bi = {b\,bl, • • • , b]^}, where 
and fcj, are uniformly taken from {0, 1}. Based on 
these two strings Ai and Bi she then makes a block of 
N qubits (single photons). 
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where aj, is the fcth bit of Ai (and similar for Bi), each 
qubit is in one of the four states 
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First, let sample photon signals go to a photon number 
splitter (PNS: 50/50), and then measures each signal in 
the measurement basis (MB) Z, or X choosing randomly 
[g^]. Evidently if more than two photons in one signal 
are measured, then Alice i will abort the communication. 
Moreover, she analyzes the error rate Eg of the samples 
by means that she requires Alice 1, Alice 2, . . ., Alice 
i — 1 to tell her the original states of the samples and 
the operations implemented by them. If the error rate 
is reasonably lower than the threshold et, Alice i goes 
ahead, otherwise she aborts it. 

M3. Alice i {i = 2,3, ■ ■ ■ ,m) generates a quater- 



nary string Ai — {a\,( 



'2i 



''N 



} and a binary string 



Bi = {b\,b2,--- ,6^}' where al and b^ are uniformly 
chosen from {0, 1, 2, 3} and {0, 1}, respectively. For each 
|7/,^i_ij^i_i) of the TV qubit state = ^ilJV'a-^-ib'-O: 

she implements the operation (Tq, cti, (T2 or on it de- 
pending on the corresponding of Ai is 0, 1, 2 or 3, 
respectively. At the same time she operates the qubit 
with / or a Hadamard operator H according to the bit 
b], in Bi is or 1, respectively. Here 

(7o = /=|0)(0| + |l)(l|, 
(7i = ia, = -|l)(0| + |0)(l|, 
fT2-a, = |0>(0|-|l>(l|, 
fT3-a, = |0)(lK|l)(0|, 
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(|0) + |1»(0| + ^(|0)-|1»(1|. (6) 



These unitary operations made by Alice i are equal to the 
encryption on the states of single photons. The resulting 
state of this qubit is denoted by j^/'jji 

M4. Ahce i sends the photons {N qubit state l^**) = 
<»k=i\^aibi)) to Alice i + 1 {i = 2,3, - ■ ■ ,m - 1). Alice 
TO sends A^-qubit state l^*™) = ^f^JV'a^b™) to Bob 1. 

M5. When Bob j (j = 1, 2, • • • , n — 1) has received 
string of N qubits, he does work similarly. First he makes 
eavesdropping check using the method Alice i used. If the 
error rate of the samples is higher than a threshold then 
he aborts the quantum communication. Otherwise he 
creates a quaternary string Cj — {c{, c^, • • • , c^} and a 
binary string Dj = dj, • • • , c^at}- Depending on the 
values of and d^, he makes operations on the qubits 
just like Alice i does. That is, he applies the operation 
(Tp, (Ji, 172 or (T3 on it depending on the corresponding 
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As 
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the four states are not all mutually orthogonal, so there 
is no measurement which can distinguish between all of 
them with certainty. Alice 1 then delivers j^*^) to Alice 
2 over their public quantum communication channel. 

M2. When Alice i {i — 2,3, ■ ■ ■ , to) receives N signals 
delivered by Alice i — 1 she use a special filter to prevent 
the invisible photons from entering the operation system 
[5^[65|. Then she chooses randomly a sufhciently enough 
subset of photons as the samples for eavesdropping check. 



the operation / or a Hadamard operator H on the qubit 
according to the bit dj, in Dj is or 1, respectively. 

M6. Bob n first randomly and independently chooses 
sufficient samples to make measurement in MB Z , ot X 
randomly. Then he asks Alice 1, Alice 2, • • • , Alice to, 
and Bob 1, Bob 2, • • • , Bob n — 1 to announce publicly 
the al,bl,ci, di of the samples in a random sequential 
order. After that he checks the error rate of the sam- 
ples measured in the MB Z ot X according to the XOR 
results of the corresponding sample bits in the strings 



Bi,B2 



I Bm,Di, D2 



If the error rate is 
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higher than the threshold St, Bob n aborts it, otherwise 
they go to the next step. 

M7. All members in group 1 and group 2 publicly an- 
nounce the strings Bi, B2, . . . , Bm and D2, . . . , Dn-i- 
Bob n measures each of their qubits with the MB Z or X 
according to the XOR (i.e.,0) results of the correspond- 
ing bits in the strings Bi, B2, ■ ■ ■ , Bm, Di, D2, ■ ■ ■ , Dn-i- 

M8. Two groups make the error rate analysis of the 
transmission between the two groups. To this end, it 
requires that all Alices and all Bobs publicly announce a* 
and the measurement results of the sample qubits chosen 
randomly, and analyze the error rates of the samples. 
If the channel is secure, the qubit states sent by Alice 
m can be used as key bits for secret sharing, otherwise 
they discard the results obtained and retry the quantum 
communication from the beginning. 

Now we discuss the security of this quantum secret 
sharing protocol between m parties and n parties with 
single photons and unitary transformations. Obviously, 
the test in M2 and M5 can nullify the attack with invis- 
ible photons [IHl and the Trojan horse attack The 
checking procedure in M5 can avoid the attack with single 
photons and attack with EPR pairs [6^ . The fake-signal 
attack with EPR pairs can be detected by the operations 
in MS and the check in M2 and M5 [621 ■ we can 
believe the security of the protocol without question. 

We should point out that the above protocol can be 
generalized to the situation where three conjugate bases, 
or six states are employed [6^. 

In summary, we propose a scheme for quantum 
secret sharing between multi-party and multi-party with 
single photons and unitary transformations, where no 



entanglement is employed. In the protocol, Alice 1 
prepares a sequence of single photons in one of four 
different states according to her two random classical 
strings, other Alice i {2 < i < m) directly encodes 
her information strings on the resulting sequence of 
Alice (i — 1) via unitary operations, after that Alice m 
sends the sequence of single photons to Bob 1. Bob I 
(Z = l,2,---,n— 1) does work similar to Alice i. Finally 
Bob n measures the qubits. If Alices and Bobs guarantee 
the security of quantum channel by some tests, then the 
qubit states sent by Alice m can be used as key bits 
for secret sharing. Any subset of all Alices or all Bobs 
can not extract secret information, but the entire set 
of all Alices and the entire set of all Bobs can. It is 
shown that this scheme is in safety. As entanglement, 
especially the inaccessible multi-party entangled state, 
is not necessary in the present quantum secret sharing 
protocol between m-party and n-party, it may be more 
applicable when the numbers m and n of the parties of 
secret sharing are large. This protocol is feasible with 
present-day technique. 
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